Change all default passwords, create unique local administrator passwords and disable unused accounts

Many connected devices, and even certain software, have default passwords that do not always have to be changed when they are first used. Disable local administrator accounts or assign passphrases that are random and unique for each local administrator account to prevent propagation using shared local administrator credentials.

The default passwords are a security loophole that is very easy to exploit because they are widely known and easy to use. There are databases out there with lists of these accounts and passwords!

Disable local administrator accounts or assign passphrases that are random and unique for each local administrator account to prevent propagation when attackers try using shared local administrator credentials.